Privacy Policy

1. Introduction

Welcome to Inflira ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our influencer marketing platform, including our campaign management and Brand Ambassador Management System ("BAMS") workflows, and related services (collectively, the "Service"). We are committed to protecting your privacy and ensuring transparency about our data practices.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

• Register for an account (name, email address, password)
• Complete your profile (bio, location, contact information)
• Connect social media accounts (via OAuth authentication)
• Create or participate in campaigns or BAMS ambassador programs
• Make payments or receive payments through our platform
• Contact us for support or inquiries

2.2 Social Media Data

When you connect your social media accounts (Instagram, YouTube, TikTok), we collect:

• Public profile information (username, follower count, bio)
• Content metrics (engagement rates, reach, impressions)
• Audience demographics (age, gender, location - where available)
• Content performance data

2.3 Usage and Technical Data

We automatically collect information about your use of our Service:

• Device information (IP address, browser type, operating system)
• Usage patterns (pages visited, features used, time spent)
• Log data (access times, error logs, performance metrics)
• Cookies and similar tracking technologies

2.4 Payment Information

For payment processing, we collect:

• Billing information (name, address, payment method details)
• Transaction history and payment records
• Tax identification information (where required)

Note: We use secure third-party payment processors (CashFree, Stripe, PayPal) and do not store complete payment card details on our servers.

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

• Create and manage your account
• Facilitate connections between influencers and companies
• Process campaigns, BAMS ambassador programs, and collaborations
• Handle payments and financial transactions
• Provide customer support and respond to inquiries

3.2 Platform Improvement

• Analyze usage patterns to improve our Service
• Develop new features and functionality
• Conduct research and analytics
• Optimize user experience and platform performance

3.3 Communication

• Send service-related notifications and updates
• Provide campaign opportunities and recommendations
• Send marketing communications (with your consent)
• Deliver security alerts and important notices

3.4 Legal and Security

• Comply with legal obligations and regulatory requirements
• Detect and prevent fraud, abuse, and security threats
• Enforce our Terms of Service and other policies
• Protect the rights and safety of our users and the public

4. Information Sharing and Disclosure

4.1 With Other Users

We share certain information to facilitate our Service:

• Influencers: Profile information, metrics, and portfolio content are visible to companies for collaboration purposes
• Companies: Company profiles and campaign information are visible to influencers
• Public Profiles: Information you choose to make public may be visible to all users

4.2 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Payment processors (CashFree, Stripe, PayPal)
• Cloud hosting and storage providers (AWS, Azure)
• Analytics and monitoring services
• Customer support and communication tools
• Security and fraud prevention services

4.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Inflira, our users, or others
• Investigate and prevent fraud, security breaches, or illegal activities

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

We implement comprehensive security measures to protect your information:

5.1 Technical Safeguards

• Encryption in transit (HTTPS/TLS 1.3) and at rest (AES-256)
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Intrusion detection and monitoring systems

5.2 Organizational Measures

• Employee training on data protection and privacy
• Strict access controls and need-to-know basis
• Regular security policy reviews and updates
• Incident response and breach notification procedures

Important: While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

• Access and review your personal information
• Update or correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Control privacy settings and data sharing preferences

6.2 Communication Preferences

• Opt out of marketing communications
• Customize notification settings
• Manage email and SMS preferences

6.3 Regional Rights

GDPR (EU Users):

• Right to be forgotten (data deletion)
• Right to data portability
• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with supervisory authorities

CCPA (California Users):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

7. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:

• Account Data: Retained while your account is active and for a reasonable period after deletion
• Transaction Records: Retained for 7 years for tax and legal compliance
• Marketing Data: Retained until you opt out or for 3 years of inactivity
• Legal Hold: Data may be retained longer if required for legal proceedings

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

8. International Data Transfers

Inflira operates globally, and your information may be transferred to and processed in countries other than your own. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where available
• Appropriate safeguards and security measures
• Compliance with applicable data protection laws

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

For users between 13-18 years of age, we require parental consent where mandated by applicable law.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

10.1 Types of Cookies

• Essential Cookies: Required for basic functionality
• Performance Cookies: Help us analyze usage and improve our Service
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for targeted advertising (with consent)

10.2 Cookie Management

You can control cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect the functionality of our Service.

11. Third-Party Services and Data Sharing - DPDPA Compliance

11.1 Third-Party Social Media Platform Integrations

11.1.1 OAuth Integration and Consent Mechanism

Our Service integrates with third-party social media platforms (including Instagram, Facebook, TikTok, YouTube, X (formerly Twitter), LinkedIn, and others) to provide analytics and connection features. In compliance with the Digital Personal Data Protection Act, 2023 ("DPDPA"), we obtain your explicit consent before accessing data from these platforms.

When you connect your accounts from these platforms:

• Explicit Consent: You are redirected to the third-party platform's official OAuth authorization page where you explicitly grant permissions for specific data access
• Limited Data Access: We access only the data you explicitly authorize through OAuth consent screens (e.g., profile information, follower count, engagement metrics)
• Platform Terms Apply: You are subject to the privacy policies and terms of service of those third-party platforms in addition to Inflira's policies
• No Unauthorized Sharing: We do not share your Inflira account data with these platforms without your explicit consent
• Right to Withdraw Consent: You can revoke access at any time through your Inflira account settings or the third-party platform's app permissions settings, in accordance with Section 6 of the DPDPA

11.1.2 Data Collected from Third-Party Platforms

When you connect your social media accounts, we may collect the following categories of data:

• Profile Information: Username, display name, profile picture, bio/description
• Account Metrics: Follower count, following count, post/video count
• Engagement Data: Likes, comments, shares, views, reach, impressions
• Audience Demographics: Age range, gender distribution, geographic location (where available and permitted by platform APIs)
• Content Performance: Performance metrics for posts, videos, or other content

This data is collected and processed in accordance with the purpose limitation principle under Section 4 of the DPDPA, solely for the purposes disclosed to you at the time of consent.

11.1.3 Purpose of Data Processing

Data obtained from third-party social media platforms is processed exclusively for the following specified purposes:

• Displaying your social media metrics and analytics within your Inflira dashboard
• Enabling companies to discover and evaluate influencers based on authentic platform data
• Facilitating campaign matching and collaboration opportunities
• Providing performance tracking and reporting for campaigns
• Improving our platform features and recommendation algorithms

We do NOT:

• Sell or share your third-party platform data with advertisers or data brokers
• Use your data for purposes beyond what you authorized during OAuth consent
• Access private or non-public data without explicit permission
• Process your data in violation of the DPDPA or third-party platform API terms

11.1.4 Data Retention and Deletion

In compliance with Section 8 of the DPDPA, we retain data from third-party platforms only for as long as necessary to fulfill the purposes for which it was collected:

• Active Connections: Metrics are refreshed periodically (typically every 4 hours) while your account remains connected
• Historical Data: Historical analytics data is retained for campaign performance tracking and reporting purposes
• Account Deletion: When you delete your Inflira account or disconnect a social media account, we will delete or anonymize the associated data within a reasonable timeframe, subject to legal retention requirements
• Right to Erasure: You may request deletion of your data by contacting our Data Protection Officer at admin@inflira.com

11.1.5 Cross-Border Data Transfer

Third-party social media platforms (Meta, Google, ByteDance, X Corp., LinkedIn) are headquartered outside India. When you connect your accounts, your data may be transferred to and processed in countries outside India, including the United States, Ireland, Singapore, and other jurisdictions where these platforms operate their servers.

Such transfers are conducted in accordance with Section 16 of the DPDPA and the respective platform's data transfer mechanisms. By connecting your accounts, you consent to such cross-border data transfers for the purposes specified in this Privacy Policy.

11.2 Google API Services - Limited Use Disclosure

11.3 Third-Party Trademarks - Fair Use under Indian Law

Our platform displays icons, logos, and trademarks of third-party social media platforms and services solely for functional purposes under the principles of fair use as contemplated under Section 30 of the Trade Marks Act, 1999. These purposes include:

• Identifying available integrations and connection options
• Indicating connection status to users' accounts on those platforms
• Displaying analytics data with proper source attribution
• Facilitating user navigation and platform identification

Trademark Ownership Acknowledgment:

• Instagram, Facebook, and Meta are trademarks of Meta Platforms, Inc.
• TikTok is a trademark of ByteDance Ltd.
• YouTube and Google are trademarks of Google LLC
• X and the X logo are trademarks of X Corp. (formerly Twitter, Inc.)
• LinkedIn is a trademark of LinkedIn Corporation
• All other third-party trademarks are the exclusive property of their respective owners

Important: Inflira is an independent platform and is NOT owned, operated, endorsed, sponsored, or affiliated with Meta Platforms Inc., ByteDance Ltd., Google LLC, X Corp., LinkedIn Corporation, or any other third-party platform whose trademarks appear on our Service. The display of third-party trademarks does NOT imply any partnership or endorsement.

11.4 Payment Processors and Financial Data

We use third-party payment processors to handle financial transactions. These processors are compliant with Indian payment regulations and data protection laws:

• CashFree: Primary payment gateway for Indian users (RBI authorized payment aggregator)
• Stripe: International payment processing (for global transactions)
• PayPal: Alternative payment method

These payment processors collect and process payment information directly. We do not store complete payment card details on our servers. Payment data is subject to the privacy policies of these third-party processors and is protected under the Payment and Settlement Systems Act, 2007 and RBI guidelines.

11.5 Cloud Services and Data Storage

We use third-party cloud services to host and operate our platform:

• Microsoft Azure: Cloud hosting, database services, and file storage with data centers in India and other regions
• Azure Blob Storage: Secure file storage for user uploads and media
• Azure PostgreSQL: Database services with encryption and backup

These services are configured with appropriate security measures including encryption in transit (TLS 1.3) and at rest (AES-256), in compliance with the DPDPA's security safeguards requirements under Section 8.

11.6 Data Sharing with Other Users

As part of our Service functionality, certain information is shared with other users on the platform:

• Influencer Profiles: Profile information, social media metrics, portfolio content, and campaign history are visible to companies for collaboration purposes
• Company Profiles: Company information and campaign details are visible to influencers
• Public Profiles: Information you choose to make public may be visible to all users and may be indexed by search engines

You have control over your privacy settings and can manage what information is visible to other users through your account settings.

11.7 Legal Disclosures and Compliance

We may disclose your personal data when required by Indian law or to:

• Comply with legal processes, court orders, or government requests under the Code of Criminal Procedure, 1973 or other applicable laws
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Inflira, our users, or the public
• Investigate and prevent fraud, security breaches, or illegal activities
• Respond to requests from law enforcement agencies or regulatory authorities in India

Such disclosures will be made in accordance with Section 7 of the DPDPA and applicable Indian laws.

11.8 External Links and Third-Party Websites

Our Service may contain links to third-party websites, applications, or services that are not operated by Inflira. This Privacy Policy does not apply to these third parties. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party services you access through our platform.

11.9 Data Protection Officer

In compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and IT Rules, 2021, Inflira Technologies Private Limited has designated a Data Protection Officer to address your privacy concerns and data protection queries:

You may contact the Data Protection Officer to exercise your rights under the DPDPA, including:

• Right to Access: Request access to your personal data we hold
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Data Portability: Request your data in a structured, machine-readable format
• Right to Grievance Redressal: File complaints regarding data protection violations

The Data Protection Officer will acknowledge your request within 24 hours and respond within 15 days as mandated under Indian law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will:

• Notify you of material changes via email or platform notification
• Post the updated policy on our website with the effective date
• Provide a summary of key changes where appropriate

Your continued use of our Service after the effective date constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiries within 30 days (or as required by applicable law).